by Karlis » Wed Jan 07, 2009 9:28 pm
Are you saying that iNet Protector doesn't see the address of a secure web site but can see the IP of it? That doesn't make sense to me. If you have the IP you can do a reverse lookup and get the address of the site.
Yes, two reasons:
1) IP filter applies to all traffic and it does not check the actual dataflow. Once IP is in the allowed list, any connection to this IP is allowed. Website filter, however, only checks web browsing traffic - it can see what website address has been requested (it does not care whether such site exists, it just sees what the user has reqquested). And with secure web browsing traffic you can not see what data the user has requested or sent.
2) The reverse lookup can not be used here, because no delay is acceptable and this lookup will take time. If used, it would slow down all internet programs, because time is reqquired to lookup domain name. Also any IP can have thousands of different domains mapped, so clearly reverse lookup is not a solution to this problem.